AI & Tech News Digest — October 30, 2026

AI NewsTop 5

• Mistral Releases the Weights of Mistral Large 4 “Le Chonk”: 1T Parameters, Best Open-Weight Coder (Oct 29)(1,292 points)

  MistralHN discussion

  Three weeks after the public preview, Mistral dropped the weights of its 1T-parameter (49B active), natively multimodal flagship — fluent in 160+ languages and, per Mistral’s numbers, the best open-weight model for code: 19.7% on Cognition’s FrontierCode 2.0, 48% on the Artificial Analysis Coding Agent Index (tying GLM-5.3 while using 47% fewer tokens per task), and 41% on Terminal-Bench 4.0 with 30% fewer output tokens than the preview. The security story is equally pitched at defenders: 51% on the AA Cyber Index, a 96.6% refusal rate on malicious cyber requests, and a vetted offensive-security variant restricted to authorized environments. Pricing is $0.70/$0.07 cached/$2.10 per million tokens, the license is modified MIT (Model-as-a-Service providers need a separate commercial license), and weights run on vLLM or SGLang today. If you self-host coding agents, this is the new open-weight baseline to benchmark against.

• Google Search Falls Below Half of Alphabet’s Revenue for the First Time; Stock Sheds ~$500B (Oct 29)(403 points)

  KadoaBBCHN discussion

  In Q3 2026 Google Search brought in $63.4B of Alphabet’s $128B — 49.7%, the first sub-50% quarter since Alphabet began breaking Search out in 2018 (the prior 31 quarters ranged 52.8–62%). The twist: Search still grew 12% year over year; the rest of Alphabet grew 40%, powered by Google Cloud at $30.7B, up 103% and now 24.1% of revenue. Markets read the mix shift as AI risk anyway — the BBC reports roughly $500 billion of market value evaporated on Thursday. For anyone building on GCP, the practical read: Cloud is now the growth engine Alphabet can’t afford to fumble, so expect continued aggressive capacity and pricing moves.

• Inside Proton’s AI Reckoning: “Loser Thinking,” AI-Tracking Software, and the Last Year Hiring Engineers (Oct 29)(147 points)

  404 MediaHN discussion

  404 Media spoke to eight current and one former Proton employee and reviewed Slack chats, recordings, and internal docs: CEO Andy Yen called a security engineer’s request to pentest AI-written code “bullshit and loser thinking,” the company installed software tracking how much of its code is AI-generated (the CTO said 90% of October’s code was, much of it Claude), declared this “the last year that Proton will hire engineers,” and began “consequential” re-interviews about employees’ AI use. An internal document admits “by all metrics that matter, we’re an underperforming company”; Proton’s spokesperson didn’t dispute the reporting. Whatever you think of the strategy, it’s a case study in shipping security products at AI velocity — read it before you mandate the same at your shop.

• OpenAI Publishes How It Detects Frontier-Model Misalignment (Oct 29)

  OpenAI

  OpenAI’s safety post describes the layered monitoring it uses to catch frontier-model misalignment and unauthorized agent behavior — including monitoring of its own internal coding agents — and references a Hugging Face incident as a case study. It lands a week after “Securing our frontier model training environment” (Oct 23), so this is now a series, not a one-off. The useful part for anyone running agents in production: the publish-your-detection-layer pattern. If your agent fleet has no equivalent of “monitor for unauthorized behavior and say so publicly,” you’re behind the labs on this specific axis.

• Claude Platform Launches Usage and Cost Analytics API, Retires the 1M-Context Beta (Oct 29)

  Release notes

  Two changes in the Oct 29 platform notes. First, a Usage and Cost Analytics API in beta — per-workspace cost attribution, which agent fleets have been reconstructing from logs until now. Second, Anthropic is retiring the 1M-token context-window beta for Claude Sonnet 4.5, so any workload pinned to the extended-context beta needs a migration path. Check your pinned model versions and context-window assumptions before the beta flags flip off.

Developer & DevOps NewsTop 5

• Binance Confirms a Security Incident Touching $6.3B — Potentially the Biggest Crypto Heist Ever (Oct 29)(998 points)

  BBCCNBCHN discussion

  Binance says about $6.3B of assets were impacted, roughly half already frozen with help from other platforms; early checks point to a compromised engineer’s laptop that enabled unauthorized withdrawals, and the exchange promises to cover all losses. Tether froze ~$1.6B and Circle more than $800M within hours, Bitcoin dropped over 4%, and the total eclipses the record $1.5B Bybit hack of 2025 — Binance.US says it’s unaffected. The operator lessons are uncomfortably general: one compromised laptop with privileged access beat the exchange’s controls, and the containment worked because counterparties could freeze stablecoins at address level. If your treasury touches crypto or your threat model assumes insider laptops are clean, update both tonight.

• “SMS of Death”: One Malformed WAP Push SMS Crashes Unpatched Android Phones, Zero-Click (Oct 29)(316 points)

  smsofdeath.comHN discussion

  A single data SMS with a 5-byte uintvar header length (88 80 80 80 00 decodes to 0x80000000) gets cast from long to int with no bounds check in WapPushOverSms.decodeWapPdu, and new byte[-2147483648] throws an uncaught NegativeArraySizeException that kills com.android.phone — dropping active calls, including emergency calls, with nothing ever shown to the victim. On Android 12 the poison messages sit in the raw SMS queue and re-crash the phone on every boot, driving a RescueParty recovery loop roughly every 90 seconds. The researcher measured a 100% reproduction rate on a Pixel 9 (April 2026 firmware) and various Samsungs; Google’s fix ships in the October 2026 Android security bulletin for Android 14–17, and — in a detail every reviewer will enjoy — widens the catch to RuntimeException instead of adding the bounds check the report proposed. Push the October patch level to every Android fleet you manage.

• Orange Tsai Publishes His Logic-Bug-Only Microsoft Edge Full Chain — $175k at Pwn2Own Berlin, No Memory Corruption, No AI (Oct 29)(236 points)

  DEVCORE blogHN discussion

  The Pwnie-winning writeup chains five bugs and two Windows features into Edge sandbox escape: a UXSS primitive hiding in Edge’s Conditional Access guidance throttle (browser-initiated navigations bind to whatever tab is current), a popup-blocker bypass via Microsoft’s hardcoded about:blank#quickAuthPopup whitelist, OneAuth auto sign-in plus an MSN CORS misconfiguration to leak the profile email, an arbitrary file write through the Immersive Reader’s un-blacklisted read:// scheme, and finally a protocols.json overwrite that hijacks the telnet:// handler for code execution — under 100 lines, all logic, zero memory corruption, done by hand before he adopted coding agents. His thesis, “attack surface is the new 0day,” is the takeaway: the vendor-specific features layered on Chromium were the vulnerability. Keep Edge current; keep this as required reading for your security team.

• Chained PHP2Shell Exploit Roots 25 Servers — Including US Government Systems (Oct 29)(308 points)

  DreamgroupHN discussion

  A new incident report documents a real-world intrusion that chained the PHP2Shell memory-safety flaws disclosed on October 21 to root 25 servers, among them US government systems — the first public accounting of the bugs being used offensively at scale, and the 151-comment HN thread spends most of its energy on why patching cycles failed. The practical rule hasn’t changed since the disclosure: if any PHP runtime you operate hasn’t been patched since October 21, treat it as compromised rather than merely vulnerable, and check persistence before you rotate credentials.

• SkyPilot: Grace Blackwell Racks Need a New Scheduler — 27% More Usable GPUs From the Same Hardware (Oct 29)(134 points)

  SkyPilotHN discussion

  SkyPilot’s argument is that Grace Blackwell’s tightly coupled CPU–GPU topology punishes naive GPU packing, and that scheduler-aware placement recovers 27% more usable GPUs out of the same racks — a claim aimed squarely at everyone whose GB-series capacity plans were written for H100-era scheduling. With GPU availability still the binding constraint on AI roadmaps, topology-aware scheduling is one of the few levers that costs nothing but code. Worth a read before your next capacity request.

Self-Hosting & HomelabTop 4

• Zeabur Open-Sources Its Self-Hosted PaaS for Kubernetes

  GitHub

  535★, Rust, Apache-2.0. Zeabur — the commercial deploy platform — published its self-hosted edition: the PaaS runs on your own Kubernetes cluster, with Docker Compose service support and internal-developer-platform features built in. The interesting position is between Dokploy/Coolify (Docker-host simplicity) and full Raw Kubernetes: if you already run a cluster and want a UI-and-templates layer on top instead of hand-written manifests, this is now an open-source option. Days-old repo from a company with a track record — audit before exposing beyond your network.

• dsh-go: DeepSeek Harness in Your Pocket

  GitHub

  632★, Dart/Flutter, AGPL-3.0, unofficial. dsh-go puts the DeepSeek coding-agent harness on Android — the agent runs locally on the phone and can also remote-control your computer, turning a handset into the console for your workstation sessions. The pattern matters more than the repo: agent front-ends are migrating to the device you actually have on you, and self-hosters get to decide whether that phone talks to a local model or their own box.

• Sylphide OS: A General-Purpose OS for Microcontroller-Based Computers (Oct 29)(54 points)

  Project pageHN discussion

  A hobby OS that treats MCUs as general-purpose computers rather than bare-metal targets — process scheduling, filesystem, and userspace on hardware that normally runs one forever-loop. It sits in the same “what if your $4 chip ran a real OS” space that made population experiments like SerenityOS and Collapse OS fun to read. Not a rack candidate — but a good weekend read for anyone whose homelab has a drawer full of ESP32s.

• NetBSD Adds a New Text Editor Called atto (Oct 29)(168 points)

  NetBSD on MastodonHN discussion

  NetBSD’s base system gained a new small editor, announced on the project’s Mastodon — notable mostly because base-system additions in the most conservative OS around are rare events, and the 138-comment thread immediately relitigates what belongs in a default install: ed, vi, mg, and now atto. If you run NetBSD boxes, next release brings a new default-adjacent editor; if you just enjoy OS archaeology, the thread is the content.

Trending GitHub RepositoriesTop 10, last 7 days

Also tracked: unclebob/ub-mode still holds the overall #1 at 4,877★ (+920 since yesterday’s table) — github.com/unclebob/ub-mode — and anhao/ai-pose-gallery-zh added another ~1,200★ to reach 3,385.

Hacker News Top Stories

1. DoorDash to acquire Instacart(456 points, 626 comments)

   DoorDash Newsroomdiscussion

   DoorDash is buying Instacart — submission titles put the deal at $17B — and the 626-comment thread runs the full antitrust-plus-gig-labor seminar on consolidating two of the biggest US delivery platforms.

2. LLM Voice(398 points, 210 comments)

   martinfowler.comdiscussion

   Martin Fowler on the uncanny valley of LLM prose: detectors miss the point because the reaction is human, even edited LLM drafts keep the voice, outlines are fine but “authors should fill the prose themselves” — with a note that he used no AI writing the post.

3. H.264 Is Magic (2016)(369 points, 134 comments)

   sidbala.comdiscussion

   The classic walkthrough of how H.264 fits a movie into bits — I-frames, prediction, and entropy coding — resurfaced on the front page; the comment section updates it for AV1 and modern encoders.

4. Hackers expose the identities of more than 40k DHS employees(260 points, 75 comments)

   NPRdiscussion

   The identities of over 40,000 Department of Homeland Security employees were dumped by hackers; the thread is about the opsec failure modes of large federal workforces, not the politics.

5. If IPv4 were land(255 points, 356 comments)

   iptrust.codiscussion

   IPv4 scarcity explained as real estate — who hoards the blocks, what a /24 costs, and why your provider charges for addresses like beachfront property; 356 comments of war stories from both sides of the market.

6. We ran AI agent swarms in Minecraft and Mindustry(231 points, 75 comments)

   YC Labsdiscussion

   A YC Labs project runs cooperating LLM agent swarms inside Minecraft and Mindustry; the thread splits between “emergent teamwork” and “looks like chaos with a scoreboard.”

Also tracked: A tiny world model running games on a Raspberry Pi Pico 2 W (169 points) — github.com/SheepSeb/tinyworldformer — and, in the other direction, DOOM turned into a transformer that classifies MNIST and plays DOOM (62 points) — github.com/mottopanikeiku/doomformer.

Reddit HighlightsTop 5

• r/LocalLLaMA — Mistral Large 4 (Le Chonk) is now open weight

  Thread

  1T total / 49B active weights land on Hugging Face; the quant requests started immediately and nobody agrees which rig runs it.

• r/CryptoCurrency — Binance was just hacked for 5.6B - Get your Funds Out

  Thread

  Withdrawal panic and frozen-fund confusion in real time; BBC’s later count put impacted assets at $6.3B.

• r/sysadmin — British Columbia, Alberta, and Manitoba Time Zone Changes

  Thread

  Three Canadian provinces are changing time-zone rules; Windows, Outlook, Teams Rooms, and meeting hygiene all need attention before the clocks move.

• r/selfhosted — New Project Megathread — Week of 29 Oct 2026

  Thread

  The weekly home for self-hosted projects younger than three months; reliably the best place to spot next month’s homelab darlings early.

• r/sysadmin — Thickheaded Thursday — October 29, 2026

  Thread

  The weekly confession booth; this edition’s top anecdote involves explaining how an entire building’s WiFi went out.